Known vulnerabilities in Content Manager Enterprise Edition

Known vulnerabilities in Content Manager Enterprise Edition

Vendor: IBM Corporation

Software: Content Manager Enterprise Edition

Software CPE: cpe:2.3:a:ibm_corporation:content_manager_enterprise_edition:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 18

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU85881 - Exposure of sensitive information to an unauthorized actor CVE-2016-0201	CWE-200	Medium	No	No	-	29.01.2024	SB2018042476
#VU85879 - Exposure of sensitive information to an unauthorized actor CVE-2015-7421	CWE-200	Low	No	No	8.5.0.2	29.01.2024	SB2018042475
#VU85324 - Out-of-bounds write CVE-2023-3894	CWE-787	Medium	No	No	8.7.0.2	12.01.2024	SB2024011212 SB2024022927 SB2024060514
#VU68844 - Type confusion CVE-2022-3676	CWE-843	Medium	No	No	8.6.0.5	31.10.2022	SB2022103129 SB2022111110 SB2022111724 and 60 more
#VU68832 - Resource exhaustion CVE-2022-42004	CWE-400	Medium	No	No	-	31.10.2022	SB2022103116 SB2022103117 SB2022111404 and 122 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	8.7.0.1	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU58977 - Deserialization of Untrusted Data CVE-2021-4104	CWE-502	Medium	No	No	8.7	15.12.2021	SB2021121507 SB2021121647 SB2021121720 and 119 more
#VU12277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-1502	CWE-79	Low	No	No	-	27.04.2018	SB2018042708
#VU9120 - Permissions, Privileges, and Access Controls CVE-2017-10356	CWE-264	Low	No	No	8.5.6	03.11.2017	SB2017101709 SB2017110310 SB2017102901 and 31 more
#VU8878 - Permissions, Privileges, and Access Controls CVE-2017-10357	CWE-264	Low	No	No	8.5.6	18.10.2017	SB2017101709 SB2017110310 SB2017102901 and 25 more
#VU8876 - Permissions, Privileges, and Access Controls CVE-2017-10355	CWE-264	Low	Available	No	8.5.6	18.10.2017	SB2017101709 SB2017110310 SB2017102901 and 25 more
#VU8873 - Permissions, Privileges, and Access Controls CVE-2017-10348	CWE-264	Low	No	No	8.5.6	18.10.2017	SB2017101709 SB2017110310 SB2017102901 and 25 more
#VU8871 - Permissions, Privileges, and Access Controls CVE-2017-10345	CWE-264	Low	No	No	8.5.6	18.10.2017	SB2017101709 SB2017110310 SB2017102901 and 25 more
#VU8863 - Permissions, Privileges, and Access Controls CVE-2017-10281	CWE-264	Low	No	No	8.5.6	18.10.2017	SB2017101709 SB2017110310 SB2017102901 and 25 more
#VU7329 - Permissions, Privileges, and Access Controls CVE-2016-5552	CWE-264	Low	No	No	8.5.0.6.2	05.07.2017	SB2017011701 SB2017070506 SB2017021508 and 9 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm CVE-2016-2183	CWE-327	Low	Available	No	8.5.0.6.2	08.09.2016	SB2016082601 SB2017053118 SB2017011701 and 49 more
#VU40450 - Improper input validation CVE-2016-2542	CWE-20	Low	No	No	8.4.3.5	24.02.2016	SB2016022406 SB2022112309 SB2016062711
#VU33638 - Data Handling CVE-2015-7575	CWE-19	Medium	No	No	-	09.01.2016	SB2016022504 SB2016020909 SB2016020910 and 10 more